Investigate being able to create sessions as 'secure' or 'httponly'.
--------------------------------------------------------------------

Key: MODPYTHON-213
URL: https://issues.apache.org/jira/browse/MODPYTHON-213
Project: mod_python
Issue Type: Task
Components: session
Reporter: Graham Dumpleton
Priority: Minor


As per original request:

http://www.modpython.org/pipermail/...ber/022803.html

and subsequent discussion, investigate whether sessions should be able to be
 created such that the underlying cookie is using either the 'httponly' or '
secure' cookie attributes.

Note that the thread in the mailing list archive doesn't join together prope
rly so you need to look for the similar subject lines in the thread index.

At the end of the discussion it wasn't completely clear how things would beh
ave if these attributes were used and thus what the outcome would be so it w
asn't pursued further.

[ Post a follow-up to this message ]